Side Channel Attack On Stream Ciphers: A Three-Step Approach To State/Key Recovery

• Published in: IACR transactions on cryptographic hardware and embedded systems Vol. 2022; no. 2; pp. 166 - 191
• Main Authors: Kumar, Satyam, Dasu, Vishnu Asutosh, Baksi, Anubhab, Sarkar, Santanu, Jap, Dirmanto, Breier, Jakub, Bhasin, Shivam
• Format: Journal Article
• Language: English
• Published: Ruhr-Universität Bochum 15.02.2022
• Subjects: Feedback Shift Register; Machine Learning; Mixed Integer Linear Programming; Satisfiability Modulo Theory; Side Channel Attack; Stream Cipher
• ISSN: 2569-2925; 2569-2925
• DOI: 10.46586/tches.v2022.i2.166-191

Side Channel Attack (SCA) exploits the physical information leakage (such as electromagnetic emanation) from a device that performs some cryptographic operation and poses a serious threat in the present IoT era. In the last couple of decades, there have been a large body of research works dedicated to streamlining/improving the attacks or suggesting novel countermeasures to thwart those attacks. However, a closer inspection reveals that a vast majority of published works in the context of symmetric key cryptography is dedicated to block ciphers (or similar designs). This leaves the problem for the stream ciphers wide open. There are few works here and there, but a generic and systematic framework appears to be missing from the literature. Motivating by this observation, we explore the problem of SCA on stream ciphers with extensive details. Loosely speaking, our work picks up from the recent TCHES’21 paper by Sim, Bhasin and Jap. We present a framework by extending the efficiency of their analysis, bringing it into more practical terms.In a nutshell, we develop an automated framework that works as a generic tool to perform SCA on any stream cipher or a similar structure. It combines multiple automated tools (such as, machine learning, mixed integer linear programming, satisfiability modulo theory) under one umbrella, and acts as an end-to-end solution (taking side channel traces and returning the secret key). Our framework efficiently handles noisy data and works even after the cipher reaches its pseudo-random state. We demonstrate its efficacy by taking electromagnetic traces from a 32-bit software platform and performing SCA on a high-profile stream cipher, TRIVIUM, which is also an ISO standard. We show pragmatic key recovery on TRIVIUM during its initialization and also after the cipher reaches its pseudo-random state (i.e., producing key-stream).